Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: I0QKTsZbnXSgkVSm5cHgoo///M3/JputTxEOAIYVUeo=
Subject key identifier: 1A:71:FE:91:FC:09:23:9B:1C:A7:71:1F:69:80:6A:BC:F8:F7:4E:A5
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 019A71B7F16888B9C02DE56A142F0D62EC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: TeMW8u9Cu2eT5ghXAYCj4bkjH/CAZvWinF9r6aIcerk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f1:68:88:b9:c0:2d:e5:6a:14:2f:0d:62:ec:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=1a71fe91fc09239b1ca7711f69806abcf8f74ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:06:7f:7b:a8:1b:b4:6b:85:a7:52:6e:d7:
3d:1e:0f:0b:91:33:ac:42:4d:33:e9:29:65:74:f1:
07:24:a4:53:73:9e:3c:68:26:bf:e7:ff:33:34:0f:
35:67:0b:ff:13:ea:9a:ed:0a:96:fd:28:0a:b8:4a:
5c:cf:e2:74:93:3f:e5:ca:32:9b:2d:95:68:76:09:
d4:2a:97:33:b1:8a:5d:4f:bf:76:1c:02:80:52:6a:
ca:5c:07:20:00:66:9e:ad:93:8f:ea:2b:6b:2f:5b:
61:e0:b4:03:9d:5c:4d:84:d4:a2:3c:1b:fd:21:b7:
e2:fc:0c:08:c4:41:36:f7:38:af:60:8b:75:f0:6a:
f7:67:18:96:ba:bb:e1:f7:ed:7d:25:60:f3:35:ab:
7f:7f:d3:47:a2:a0:cb:a0:58:da:f1:a0:44:80:52:
74:8d:ef:57:58:2c:04:f8:19:38:bd:b5:72:76:31:
34:fd:58:f0:cb:74:eb:15:63:28:46:9c:39:0c:2f:
c1:67:1c:76:68:19:d5:3f:9c:24:8a:83:91:68:6c:
4e:b3:ad:43:24:d8:4c:99:3a:e9:67:6f:0c:06:78:
e0:8c:7f:86:37:82:d5:8c:da:97:ad:7b:ed:79:d4:
75:6c:57:f3:7a:9d:0f:d2:1e:0f:8a:88:b2:fb:f1:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:FE:91:FC:09:23:9B:1C:A7:71:1F:69:80:6A:BC:F8:F7:4E:A5
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a4:2b:1f:95:40:0b:03:5a:69:fd:f8:0b:62:ee:20:58:35:
4c:54:67:03:70:2a:e6:d0:ca:42:40:0b:e0:f7:fd:d2:79:f9:
cb:cd:7f:b8:15:56:8a:a3:8b:c8:25:41:b1:49:55:c2:48:97:
09:c8:9f:76:5d:f7:e8:71:cb:f1:33:d8:b2:ce:6e:d2:f7:86:
8a:a9:aa:6b:2c:25:f4:eb:ab:33:ce:11:55:d7:67:35:94:0c:
ff:c0:d2:6d:ba:b3:30:b2:35:e8:1c:f3:ea:6f:38:9b:a6:62:
1c:61:be:2e:05:52:28:5b:5e:a8:bf:0a:17:8f:b1:99:f4:77:
f2:29:51:ef:21:75:18:2d:91:e3:d9:1e:44:67:8d:be:59:d3:
89:d3:12:f3:3a:e5:c4:27:69:25:70:c1:0c:c7:ff:c8:6a:77:
a0:53:ff:3b:a8:f5:5c:78:ba:10:f9:39:00:e7:cf:1a:7c:fe:
9c:90:6b:df:13:13:67:f7:e5:8f:e6:3a:b8:99:f3:5c:2c:2c:
db:c9:97:9a:1a:cc:ff:03:f2:45:42:8a:68:49:83:02:66:b7:
f7:9d:a2:1c:2c:69:91:c6:58:19:95:67:f1:35:62:89:db:a0:
9f:0e:96:cf:63:74:6a:2a:58:eb:a6:ae:79:af:0c:8c:ce:eb:
49:d7:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:30 2025 by rpki-client